Let your agent get its own API access —
with your keys, in your vault.
A vault on your machine holds your API keys. A loopback proxy on 127.0.0.1 injects them by destination domain and writes one SQLite ledger row per call. The MCP server your agent talks to never returns a key.
Install from source
$ git clone https://github.com/beizhangnina/skeletonkey.git
$ cd skeletonkey && npm install && npm run build && npm link
$ skeletonkey init # alias: skkNeeds Node 22 or newer. Vault backends: Bitwarden by default, plus 1Password, your OS keychain, or an encrypted file. No account, and no SkeletonKey server.
How it works
-
01
Find
find_api("web scraping")searches an index on your disk, seeded with 163 providers. For a vendor it does not know,discover_apiandpropose_entryadd the entry locally. -
02
Get access
request_accessreturns a proxy URL for a key you already hold, or a signup plan the agent walks with its own browser and email. You confirm payment and terms yourself. -
03
Call through the proxy
The agent calls 127.0.0.1, the proxy adds your key for that domain, and the ledger records one row for the call. The agent never holds the key.
Go direct with your own keys. The index routes you through an aggregator only when the direct path needs a subscription.
Two ways in
Self-host, free
Clone the repo, build it, link the CLI. v0.1 under the MIT license, written in TypeScript. Everything runs on your machine, so there is nothing to sign up for. npm publishing is off for now, so install from source.
Read the code on GitHubComing soon
The same MCP tools behind a hosted endpoint, for agents that cannot run a local process. It is not built yet, so there is nothing to buy and no date to promise.